Online authentication method based on smart card, smart card and authentication server

Abstract

Disclosed are an online authentication method based on a smart card, smart card and authentication server, the method comprising: running a first application located in a user identification and authentication card; receiving, via a first channel, authentication request information directly transmitted by a current terminal user to the user identification and authentication card, or receiving authentication request information transmitted to the user identification and authentication card by the current terminal user through the forwarding of an authentication server; generating, by the first application, an authentication code according to the authentication request information, the authentication code being used to identify whether the current terminal user is a valid user; transmitting, via the first channel, the authentication code to the authentication server for authentication; and receiving, via the first channel, an authentication result fed back by the authentication server after the authentication, and determining whether the current terminal user is a valid user.

1 - 24 . (canceled) 
     
     
         25 . An authentication method, comprising;
 running an application (app) in an authentication card;   receiving, on a channel, information on an authentication request sent by User Equipment (UE);   generating, using the app according to the information on the authentication request, an authentication code for determining whether the UE is being used by an authorized user; and   sending, on the channel, the authentication code to an authentication server,   wherein an authentication result returned by the authentication server received on the channel after the authentication server has authenticated the authentication code, the authentication result indicating whether the UE is being used by the authorized user.   
     
     
         26 . The method according to  claim 25 , wherein the channel comprises at least one of an Open Mobile Application Programming Interface (API) (OMA) channel and an Over-The-Air (OTA) channel. 
     
     
         27 . The method according to  claim 25 , wherein the information on the authentication request is sent by the UE to the authentication card and/or the app directly and/or via the authentication server. 
     
     
         28 . The method according to  claim 25 , wherein the generating, using the app according to the information on the authentication request, an authentication code comprises;
 acquiring information to be authenticated by analyzing the information on the authentication request,   extracting a preset authentication logic, and   generating the authentication code according to the information to be authenticated and the preset authentication logic.   
     
     
         29 . The method according to  claim 25 , wherein the authentication request is initiated by the UE. 
     
     
         30 . The method according to  claim 25 , wherein having received the authentication request initiated by the UE, an app managing platform generates the information on the authentication request comprising a serial number of the authentication request, and returns the information on the authentication request to the UE. 
     
     
         31 . The method according to  claim 25 , wherein the authentication server returns the authentication result to the UE on the channel via the app managing platform. 
     
     
         32 . An authentication card, comprising:
 a processor; and   memory storing instructions executable by the processor,   wherein the processor is arranged for:   running an application (app) in an authentication card;   receiving, on a channel, information on an authentication request sent by User Equipment (UE);   generating, using the app according to the information on the authentication request, an authentication code for determining whether the UE is being used by an authorized user; and   sending, on the channel, the authentication code to an authentication server,   wherein an authentication result returned by the authentication server is received on the channel after the authentication server has authenticated the authentication code, the authentication result indicating whether the UE is being used by the authorized user.   
     
     
         33 . The authentication card according to  claim 32 , wherein the channel comprises at least one of an Open Mobile Application Programming Interface (API) (OMA) channel and an Over-The-Air (OTA) channel. 
     
     
         34 . The authentication card according to  claim 32 , wherein the information on the authentication request is sent by the UE to the authentication card and/or the app directly and/or via the authentication server. 
     
     
         35 . The authentication card according to  claim 32 , wherein the generating, using the app according to the information on the authentication request, an authentication code comprises;
 acquiring information to be authenticated by analyzing the information on the authentication request,   extracting a preset authentication logic, and   generating the authentication code according to the information to be authenticated and the preset authentication logic.   
     
     
         36 . The authentication card according to  claim 32 , wherein the authentication request is initiated by the UE. 
     
     
         37 . The authentication card according to  claim 32 , wherein having received the authentication request initiated by the UE, an app managing platform generates the information on the authentication request comprising a serial number of the authentication request, and returns the information on the authentication request to the UE. 
     
     
         38 . The authentication card according to  claim 32 , wherein the authentication server returns the authentication result to the UE on the channel via the app managing platform. 
     
     
         39 . A computer-readable storage medium having stored therein instructions that, when executed by a processor, cause the processor to perform an authentication method, the method comprising;
 running an application (app) in an authentication card;   receiving, on a channel, information on an authentication request sent by User Equipment (UE);   generating, using the app according to the information on the authentication request, an authentication code for determining whether the UE is being used by an authorized user; and   sending, on the channel, the authentication code to an authentication server,   wherein an authentication result returned by the authentication server is received on the channel after the authentication server has authenticated the authentication code, the authentication result indicating whether the UE is being used by the authorized user.   
     
     
         40 . The storage medium according to  claim 39 , wherein the channel comprises at least one of an Open Mobile Application Programming Interface (API) (OMA) channel and an Over-The-Air (OTA) channel. 
     
     
         41 . The storage medium according to  claim 39 , wherein the information on the authentication request is sent by the UE to the authentication card and/or the app directly and/or via the authentication server. 
     
     
         42 . The storage medium according to  claim 39 , wherein the generating, using the app according to the information on the authentication request, an authentication code comprises:
 acquiring information to be authenticated by analyzing the information on the authentication request,   extracting a preset authentication logic, and   generating the authentication code according to the information to be authenticated and the preset authentication logic.   
     
     
         43 . The storage medium according to  claim 39 , wherein the authentication request is initiated by the UE. 
     
     
         44 . The storage medium according to  claim 39 , wherein having received the authentication request initiated by the UE, an app managing platform generates the information on the authentication request comprising a serial number of the authentication request, and returns the information on the authentication request to the UE.